13538 matches found
Mozilla Firefox CSS Border Width Memory Corruption - Ver2 (CVE-2006-1739)
A memory corruption vulnerability has been reported in Mozilla Firefox, Mozilla Thunderbird and Mozilla Seamonkey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
FlashGameScript index.php func Parameter PHP Code Execution - Ver2 (CVE-2007-1078)
A code execution vulnerability has been reported in FlashGameScript. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco Prime Data Center Network Manager processImageSave.jsp Arbitrary File Upload (CVE-2013-5486)
An arbitrary file upload vulnerability exists in Cisco Prime Data Center Network Manager...
Adobe Acrobat and Reader Memory Corruption (APSB14-28: CVE-2014-8445)
A memory corruption vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Acrobat and Reader parses a malformed PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader Memory Corruption (APSB13-22: CVE-2013-3352)
A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
ABB MicroSCADA Wserver Multiple Buffer Overflows
Multiple Buffer Overflow vulnerabilities have been reported in the Wserver component of ABB MicroSCADA. The vulnerabilities are due to the copying of user controlled data to stack-based buffers without size verification. A remote attacker can exploit this issue by sending a specially crafted...
Suspicious Javascript Containing Overly Long Strings (CVE-2013-2551)
Javascript may contain variables assigned with overly long strings. This behavior may indicate an exploitation attempt...
Cisco Prime Data Center Network Manager FileUploadServlet Arbitrary File Upload (CVE-2013-5486; CVE-2019-1620)
An arbitrary file upload vulnerability exists in Cisco Prime Data Center Network Manager. The vulnerability is due to lack of authentication and insufficient input validation in the FileUploadServlet when processing HTTP requests. A remote unauthenticated attacker can upload arbitrary files to...
Microsoft IIS Short Filename Information Disclosure
An information disclosure vulnerability has been reported in Microsoft IIS. The vulnerability is due to an error in the way Microsoft IIS handles specially crafted URLs. A remote attacker can leverage this vulnerability to view undisclosed information stored on the server...
Adobe Flash Player Memory Corruption (APSB13-28: CVE-2013-5332)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
Apache Solr SolrResourceLoader Directory Traversal (CVE-2013-6397)
A directory traversal vulnerability has been reported in Apache Solr. The vulnerability is due to insufficient validation of the resource paths passed to certain Solr REST services. A remote attacker can exploit this vulnerability by sending a specially crafted request to Apache Solr. Successful...
JavaScript Malicious Obfuscation Techniques
Known exploits could potentially bypass security products by using JavaScript obfuscation techniques. Since the exploits are obfuscated they may not be detected by IDS and IPS systems, thus allowing attackers to successfully attack target machines...
Adobe Flash Player Memory Corruption (APSB13-26: CVE-2013-5329)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
Oracle Outside In Microsoft Access 1.x Parser Buffer Overflow (CVE-2013-5791)
A stack buffer overflow vulnerability exists in Oracle Outside-In, a set of libraries used to decode many file formats. The vulnerability is due to an error while processing Microsoft Access 1.x database files .mdb. This vulnerability can be exploited by causing an application that uses the...
GLPI install.php Remote Command Execution (CVE-2013-5696)
A command execution vulnerability has been reported in GLPI...
PHP OpenSSL Extension X.509 Certificate Memory Corruption (CVE-2013-6420)
A code execution vulnerability has been reported in PHP. The vulnerability is due to a memory corruption error when handling a malicious ASN.1 data type for a timestamp in an X.509 certificate. A remote attacker can exploit this flaw by sending a malicious certificate...
WellinTech KingView ActiveX Control Heap Buffer Overflow Remote Code Execution (CVE-2011-3142)
A stack-based buffer overflow vulnerability has been reported in WellinTech KingView ActiveX control. The vulnerability is due to failure to perform adequate boundary checks on user-supplied input. A remote attacker can exploit this vulnerability by sending via a long second argument to the...
HP SiteScope issueSiebelCmd SOAP Request Code Execution (CVE-2013-4835)
A command execution vulnerability has been found in HP SiteScope...
Zabbix Multiple SQL Injections Information Disclosure
An SQL Injection vulnerability has been reported in Zabbix...
IBM Platform Symphony SOAP Requests Processing Buffer Overflow (CVE-2013-5387)
A buffer overflow vulnerability has been reported in IBM Platform Symphony...
Linux Kernel UDP UFO Large Packet Denial of Service (CVE-2013-4563)
A denial of service vulnerability exists in Linux Kernel with UDP Fragmentation Offload UFO enabled...
Microsoft Access Memory Corruption (MS13-074; CVE-2013-3155)
A remote code execution vulnerability exists in Microsoft Access...
AdaptWeb Web Application SCADA SQL Injection (CVE-2009-2152)
An SQL Injection vulnerability has been reported in AdaptWeb 0.9.2. The vulnerability is due to improper validation of the CodigoDisciplina parameter passed to the application. A remote unauthenticated attacker could exploit this vulnerability by sending a request with a crafted CodigoDisciplina...
Sybase Multiple Products Directory Traversal (CVE-2011-2474)
A directory traversal vulnerability has been reported in multiple Sybase products...
GIMP XWD File Handling Heap Buffer Overflow (CVE-2013-1978)
A heap buffer overflow vulnerability leading to code execution has been reported in GNU Image Manipulation Program GIMP. The vulnerability is due to insufficient validation of certain fields while parsing XWD files. Remote attackers can exploit this vulnerability by enticing the target user to op...
Nodejs js-yaml load() Code Execution (CVE-2013-4660)
A JavaScript Code Execution vulnerability has been reported in Nodejs...
Kingsoft Writer Font Names Buffer Overflow (CVE-2013-3934)
A code execution vulnerability has been reported in Kingsoft Writer. The vulnerability is due to an error while handling font names in WPS or Office word files. A remote attacker can exploit this vulnerability by enticing an unsuspecting user to download and process a malicious file with a...
Microsoft Access ACCDB File Memory Corruption (MS13-074; CVE-2013-3157)
A memory corruption vulnerability has been reported in Microsoft Access...
Adobe Acrobat and Reader ToolButton Use After Free (APSB13-15; CVE-2013-3346)
A use after free vulnerability exists in Adobe Acrobat and Reader...
HP Intelligent Management Center SOM euAccountSerivce Authentication Bypass (CVE-2013-4824)
An authentication bypass vulnerability exists in the SOM add-in module of HP Intelligent Management Center...
OpenLDAP rwm Overlay Denial of Service (CVE-2013-4449)
A denial of service vulnerability has been reported in OpenLDAP...
Vtiger CRM Authenticated Remote Code Execution
A remote code execution vulnerability has been reported in VTiger CRM...
Microsoft Internet Explorer runtimeStyle Handling Memory Corruption (MS13-080; CVE-2013-3882)
A memory corruption vulnerability exists in Microsoft Internet Explorer...
ABB MicroSCADA Wserver Command Execution
A command execution vulnerability has been reported in ABB MicroSCADA. The vulnerability is due to insufficient user authentication by the wserver.exe program when accepting remote execution calls. A remote, unauthenticated attacker can exploit this vulnerability to execute arbitrary commands on...
Apache Roller OGNL Injection Remote Code Execution (CVE-2013-4212)
A command execution vulnerability exists in Apache Roller due to a lack of sanitization on OGNL expressions passed to certain methods. This can lead to OGNL injection which can result in remote code execution. A remote unauthenticated attacker could exploit this vulnerability by sending crafted...
Microsoft Windows X.509 Certificate Validation Denial of Service (MS13-095; CVE-2013-3869)
A denial of service vulnerability exists in Microsoft Windows. The flaw is due to improper handling of specially crafted X.509 certificates during certificate validation. Successful exploitation could cause a denial of service condition where the web service becomes unresponsive.A remote attacker...
ANSSI Improperly Issued Digital Certificates HTTPS Spoofing
Several improperly issued CA certificates could be used in HTTPS spoofing attacks...
ManageEngine DesktopCentral AgentLogUpload Arbitrary File Upload
A code execution vulnerability has been reported in ManageEngine DesktopCentral. The vulnerability is due to lack of authentication and insufficient input validation in the AgentLogUploadServlet.class when processing HTTP requests. A remote unauthenticated attacker can upload arbitrary files to...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5049)
A remote code execution vulnerability has been reported in Internet Explorer...
Microsoft Scripting Runtime Object Library Use-After-Free Code Execution (MS13-099; CVE-2013-5056)
A remote code execution vulnerability has been reported in the Microsoft Scripting Runtime Object Library...
Malicious Payload Encoding Remote Code Execution
Malicious payload can be encoded to circumvent security software. Successful exploitation could allow attackers to execute arbitrary code on the target...
Portable Executable Files With Weak Encryption (CVE-2013-3900)
Portable Executable PE files can contain encrypted data. PE files with weak data encryption can be decrypted to manipulate the data. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...
Microsoft Windows WinVerifyTrust Signature Validation Code Execution (MS13-098; CVE-2013-3900)
A remote code execution vulnerability has been reported in Microsoft Windows...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5051)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5047)
A remote code execution vulnerability has been reported in Internet Explorer...
PDF Containing Suspicious OpenAction
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader when handling PDF files that contain plain JavaScript. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system via a specially crafted PDF file...
Multiple OS Malicious Payload Remote Code Execution
A remote code execution vulnerability has been reported in multiple operating systems. A remote attacker can exploit this vulnerability by delivering malicious payload to the target machine. Successful exploitation would allow an attacker to execute code on the target...
Microsoft Windows Win32 Shellcode Remote Code Execution
A remote code execution vulnerability has been reported in Microsoft Windows...